CVE-2026-61534 in yayson
Prediction
by VulDB Data Team • 09/12/2026
A flaw has been found in yayson up to 4.2.0. Affected by this vulnerability is the function Store.sync of the component Deserialization Logic. Executing a manipulation of the argument Type can lead to improperly controlled modification of object prototype attributes. The attack may be performed from remote. Upgrading to version 4.3.0 addresses this issue. Upgrading the affected component is advised.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.